CVE-2021-38688

HIGH

7.1

Description

An improper authentication vulnerability has been reported to affect Android App Qfile. If exploited, this vulnerability allows attackers to compromise app and access information We have already fixed this vulnerability in the following versions of Qfile: Qfile 3.0.0.1105 and later

CVE Details

CVSS v3.1 Score7.1

SeverityHIGH

CVSS VectorCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack VectorADJACENT_NETWORK

ComplexityHIGH

Privileges RequiredNONE

User InteractionREQUIRED

Published12/29/2021

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

qnap:qfile

Weaknesses (CWE)

CWE-287

References

https://www.qnap.com/en/security-advisory/qsa-21-55(security@qnapsecurity.com.tw)

https://www.qnap.com/en/security-advisory/qsa-21-55(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.